Privacy policy

1. Data Controller

The company responsible for the processing of your personal data described in this Privacy Policy is:

InterNestor GmbH

Managing Directors: Moritz Meltzer, Dr. Alexander Schulz

Address: Vitalisstraße 184, 50827 Cologne

Phone: +49 (0) 221 222 838 0

Email: support@your-cake.com

2. Data Protection Officer

If you have any questions regarding the processing of your personal data, please contact our Data Protection Officer:

InterNestor GmbH

Data Protection Team

Address: Vitalisstraße 184, 50827 Cologne

Phone: +49 (0) 221 222 838 0

datenschutz@deinetorte.de

3. Details on specific processing activities

a. Customer retention/advertising for similar goods and services

We also use your contact information for advertising purposes, provided we do not require your consent for this (e.g., for direct mail advertising, direct marketing for our own similar goods or services within existing customer relationships).

The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR). Our legitimate interest lies in customer care and the provision of information about our products.

Please also pay particular attention to the section “Right to Object (Art. 21 GDPR).” You may object to this processing of your data at any time and free of charge, e.g., by contacting us using the contact details listed in the “Controller” section.

b. Conducting Sweepstakes/Loyalty Programs/Cashback and Other Promotions

If you participate in a promotional campaign, we collect personal data necessary to conduct the promotional campaign. These are marked as required fields in the entry form. The legal basis for processing this data is Art. 6(1)(b) GDPR. If you do not provide this data, you cannot participate in the campaign.

In addition, we may collect further data that you can provide voluntarily. This processing is based on our legitimate interest (Art. 6(1)(f) GDPR). For example, we ask for your title so that we can address you as you prefer. Answering questions regarding product purchases and the promotional campaign itself is important to us because we use this information to derive insights and make decisions regarding product development and maintenance.

We generally store participants’ data for up to 6 months after the campaign ends. For winners’ data, there are additional retention periods under tax and commercial law, so we must store this data for a longer period.

In the context of some promotional campaigns, we link participation in the campaign to the obligation to consent to further marketing measures (e.g., newsletter subscription) and—with your consent—may also use the data collected as part of the promotional campaign to personalize marketing measures. In this case, your separately granted consent serves as the legal basis for processing this data (Art. 6(1)(a) GDPR).

To carry out the campaign, we engage service providers as data processors (e.g., for shipping goods or processing cashback).

c. Contact/Feedback

You can contact us via a form or by email. We process your data to respond to your inquiry. This also constitutes the legitimate interest for data processing. The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR).

d. Contacting Us via the AI Chat Assistant

You can use our AI chat assistant to ask questions about our products, orders, and other service-related topics. Please note that you are communicating with an AI system and not directly with one of our employees.

When you use the AI chat assistant, we process your inputs and any personal data contained therein. This may include, in particular, your contact details, order information, and any other information you provide to us as part of your inquiry.

We process your data for the purpose of handling your request. If your inquiry is related to a contract or pre-contractual measures, the processing is based on Article 6(1)(b) GDPR. For other inquiries, the processing is based on our legitimate interest in the efficient and user-friendly handling of customer inquiries pursuant to Article 6(1)(f) GDPR.

To provide the AI chat assistant, we use goai GmbH, Am Anger 12, 4053 Haid bei Ansfelden, Austria, as a data processor.

Further information on how goai processes your personal data can be found here.

e. Order processing

We use your contact and order data for contract processing and, if applicable, returns processing, as well as for reviewing and handling any future warranty or guarantee claims and for product monitoring (including potential recalls). The processing of the aforementioned data is necessary for the fulfillment of the order. The legal basis for this is Art. 6(1)(b) GDPR.

For the purpose of delivery, your contact data is also transmitted to postal services and processed by these entities. The legal basis for this is Art. 6(1)(b) GDPR.

f. Data transfer to shipping service providers

For the purpose of delivery, your contact data is also transmitted to postal services and processed by these entities. The legal basis for this is Art. 6(1)(b) GDPR.

To enable you to track your shipment after placing your order, we use the service provided by PAQATO GmbH (Johann-Krane-Weg 6, 48149 Münster). On our behalf, Paqato sends shipping notifications and delivery status updates. For this purpose, we share customer data (email address, first and last name, and address) along with the tracking number with Paqato. The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR). Our legitimate

interest lies in enabling effective and informative customer communication as well as transparent and reliable shipping processing after the package has been shipped.

g. Payment Processing and Credit Check

For credit card payments, we use Shopify Payments from Shopify International Ltd. (“Shopify”), c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland. For all other payment methods, we use mollie B.V. (“mollie”), Kreizersgracht 121, NL-1015Cj Amsterdam, Netherlands, as our payment service provider. Your entered payment data is collected, stored, and passed on only to the companies involved in the payment process in accordance with Art. 6(1)(b) GDPR at Shopify or mollie. Further information regarding the processing of your personal data by Shopify can be found here; further information regarding the processing of your personal data by mollie can be found here.

h. Trusted Shops

The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops seal of approval and the collected reviews, as well as to offer Trusted Shops products to buyers after they place an order.

This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in optimal marketing by enabling secure shopping in accordance with Art. 6(1)(f) GDPR. The Trustbadge and the services advertised through it are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file containing, for example, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), which documents the access. This access data is not analyzed and is automatically overwritten no later than seven days after the end of your visit to the site. Additional personal data is only transmitted to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order, or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

i. Newsletter

You can sign up for our email newsletter. We process your data to send you emails and, where applicable, to track which of these emails you open. The legal basis for this is your consent (Art. 6(1)(a) GDPR). If you have consented to this, we also personalize our newsletters based on data we have received from you in another context. For example, we can send you regional offers via email if you have provided us with your address as part of a contest. You can revoke your consent at any time with future effect, e.g., by clicking the unsubscribe link in one of our newsletter .

If, when subscribing to a newsletter, you agreed that your email address may be shared with marketing partners, the provisions described under “(Re-)Marketing – Data Sharing with Third Parties via Email Addresses or Phone Numbers” also apply.

Emails are sent via Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany (“Brevo”). Brevo processes your data on our behalf.

j. Social Media Channels

i. Vimeo

To display video content on our website, we use a plugin to embed Vimeo videos. The provider of the video portal is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When you visit a page with an integrated Vimeo plugin, a connection to Vimeo’s servers is not established immediately. Instead, a local image (“thumbnail”) is loaded to indicate the video, and Vimeo is identified as a third-party provider. Users must actively start the Vimeo video. Only then does Vimeo learn the IP address of your device and the page with the Vimeo video that you have just accessed, even if you are not logged in to the video portal or do not have an account there. The information collected by Vimeo is transmitted to the video portal’s servers in the United States.

The legal basis for the use of Vimeo on our website is your consent by actively starting the video (Art. 6(1)(a) GDPR).

Details on the handling of user data can be found in Vimeo’s privacy policy at https://vimeo.com/privacy

Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA, is generally responsible for the collection and further processing of personal user data on Vimeo’s websites.

We process your personal data only if you contact us via our Vimeo page. The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR) in processing your inquiry or, should your inquiry be aimed at entering into a contract with us, Art. 6(1)(b) GDPR.

ii. YouTube

We use our YouTube channel to inform users about our products and to interact with them. Processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in communicating with users and conducting promotional activities for our products.

YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

You can find more information on how Google uses personal data here.

iii. Facebook Page

We operate a Facebook Page. The Facebook Page is a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). When using the Facebook Page, Facebook may process personal data for which Facebook and we are jointly responsible. This joint responsibility is governed by the Facebook “Page Insights Addendum Regarding the Controller.”

All essential information regarding data processing on the Facebook Page can be found in the Facebook Data Policy and the Facebook Cookie Policy.

There you will also find all information regarding the nature and scope of the personal data affected by the data processing, as well as your rights to access, confirm, correct, delete, restrict, data portability, and file a complaint.

The legal basis for data processing on the Facebook Page is the legitimate interests of us, Facebook, and their customers in advertising, recommendations, insights, and analytics (Art. 6(1)(f) GDPR). You may object to data processing by Facebook (see the Facebook Data Policy and Cookie Policy for more information).

We have no influence over data processing by Facebook. We do not receive any data from Facebook that would allow us to identify Facebook Page users or analyze your usage behavior. Nor do we use any of our own tools on the Facebook Page that would allow us to perform such identification or analysis.

iv. Instagram

We operate an Instagram page. Instagram is a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). When using Instagram, Meta may process personal data for which Meta and we are jointly responsible. Meta describes what information Meta receives and how it is used in its Privacy Policy. You can also find further information in Meta’s Terms of Service.

Meta provides information about the use of cookies in its Cookie Policy for the Instagram service.

We use our Instagram page to inform our customers about our products and to interact with them. This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in communicating with our customers and conducting promotional activities for our products.

Instagram allows us to use the “Insights” feature, through which Meta provides us with statistical data on the use of our Instagram pages. This data is aggregated and therefore anonymous, meaning that we cannot view the personal data of individual users or visitors. We do not know in detail which data Meta uses for usage analysis in connection with our Instagram pages. You can find more information under Instagram Insights.

v. TikTok

We operate a TikTok page. TikTok is a service provided by TikTok Technology Limited, 10 Earlsfort Court, Dublin 2, D02 AK70, and TikTok Information Technologies UK Limited, One London Wall, 6th Floor, London, EC2Y 5EB (“TikTok”). When using TikTok, personal data may be processed by TikTok, for which TikTok and we are jointly responsible. TikTok describes what information it receives and how it is used in its Privacy Policy. You can also find further information in TikTok’s Terms of Service.

We use TikTok to communicate with our customers and promote our products. This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in communicating with our customers and conducting promotional activities for our products.

TikTok allows us to obtain aggregated data in the following areas: technical data and usage data related to how you interact with ads on TikTok, as well as data from other sources, such as video views, profile views, likes, comments, shared content, gender and locations of followers, follower activity during peak times, user data, and event data.

vi. Pinterest

We operate a Pinterest page. Pinterest is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). When using Pinterest, personal data may be processed by Pinterest, for which Pinterest and we are jointly responsible. Pinterest describes what information it receives and how it is used in its Privacy Policy. Further information can also be found in Pinterest’s Terms of Service.

Pinterest provides information about the use of cookies in its Cookie Policy.

We use our Pinterest page to inform our customers about our products and to interact with them. This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in communicating with our customers and conducting promotional activities for our products.

Pinterest allows us to receive aggregated data regarding the use of our Pinterest page. This data is anonymized and does not allow us to draw conclusions about individual users. This includes, for example, statistics on interactions with our pins, such as impressions, clicks, and shared content. We do not know in detail which data Pinterest uses for usage analysis in connection with our Pinterest page.

k. Server Logging

Each time you visit our website or use our app, we log data in server log files that originates from your device and may also include personal data. This applies to the following data:

- The operating system of your device

- The type of browser you are using (when visiting the website)

- Name of your internet service provider

- Your IP address

- Date and time of the visit

- The pages of our website you visited, including any search terms

- The websites from which you accessed our website (when accessing the website)

Processing is necessary to ensure the functionality of the website and the app, to optimize and correctly deliver the content of our website and app, and to provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack. This also constitutes the legitimate interest for data processing. The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR).

We regularly delete this data after 14 days; in cases of misuse, after the conclusion of administrative or judicial proceedings.

l. Tracking and Cookies

Our website / app uses cookies and similar technologies that store or read information on your device for the following purposes:

● Enabling the functionality of the website / app

● Analysis and personalization - Tracking

● (Re-)marketing - Data exchange with third parties

i. Enabling the functionality of the website / app

We use cookies and similar technologies to enable certain functions of the website / app. This is strictly necessary to provide our website / app. For example, we can

· Save your preferred language version of our website / app or similar settings for your next visit.

· Distribute requests to our website / app across different web servers (load balancing).

· Give multiple requests to our website/app a unified context (session), thereby enabling login-restricted areas of our website/app or a unified selection and payment process.

· Save your selection or settings regarding consent for tracking and manage tracking technologies according to your choice.

Our legitimate interest in processing this data is to ensure the smoothest possible user experience on our website/app and to verify that user actions are actually performed by an authenticated user.

The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR) or § 25(2)(2) TTDSG.

We use the following products to enable the functionality of the website/app:

Cloudflare

Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare processes your data on our behalf. Cloudflare serves to accelerate the delivery and display of web pages in the browser.

Yotpo

Yotpo Ltd., 400 Lafayette St., New York, NY 10003, USA (“Yotpo”). Yotpo processes your data on our behalf. Yotpo is used to display submitted product reviews on our website and to provide an enhanced user experience through authentic reviews from verified buyers. For more information on data protection in connection with Yotpo’s services, please see here.

ii. Analysis and Personalization – Tracking

We use cookies and similar technologies to analyze user behavior on our website and in our app and to customize them accordingly.

If you have consented to this, we process the following information during every interaction with our website / app, we process information about the device you are using and the browser you are using (in the case of the website). This allows us, for example, to determine the language settings you use on our website / app, whether you are using a smartphone or a desktop computer, or from which country you are accessing our website or using our app.

We also process information about how you interact with our website/app, e.g., where you were referred from to our website/app, how long you use our website/app, and the path you take as you navigate through individual subpages. For example, we can track whether you found us via a search engine (and if so, using which search term) or an advertisement, how long you engaged with the content of a specific page, and how many pages you visited in total.

We use this information to analyze user behavior on our website and in our app and to optimize the website/app accordingly. In some cases, we create several different versions of our website, which we present to individual users or user groups, and use cookies or similar technologies to analyze which version you use and how.

The legal basis for this is your consent (Art. 6(1)(a) GDPR or § 25(1) TTDSG). You may revoke or modify your consent at any time with future effect. To do so, you can access our tracking settings menu. You can also configure settings regarding the use of cookies and similar technologies in the browser you are using.

We use the following products for analysis and personalization:

1. Google Tag Manager

Google Tag Manager is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf. Our configuration of Google Tag Manager does not allow Google to use the data collected via Google Tag Manager to improve Google products and services. You can find more information about how Google uses personal data here.

2. Stape

Stape is a service provided by Stape Europe OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia (“Stape”). Stape processes your data on our behalf. We use Stape for server-side processing and management of tracking and marketing data. For more information on how Stape processes personal data, please see Stape’s privacy policy.

3. Google Maps

Google Maps is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf. You can find more information about how Google uses personal data here.

4. Qlik

Qlik is a service provided by Kabeljo Digital AB, Pontonjärgatan 28, 112 37 Stockholm, Sweden (“Qlik”). Qlik processes your data on our behalf.

5. Google Analytics (Website)

Google Analytics is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes your data on our behalf. Our configuration of Google Analytics does not allow Google to use the data collected via Google Analytics to improve Google products and services.

You can find more information about how Google uses personal data here.

Google is established in the United States along with other companies in the same corporate group (in particular Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and uses these as data processors, so we cannot rule out the transfer of your personal data to the United States.

6. Yotpo Pixel

We use the Yotpo Pixel, a service provided by Yotpo Ltd., to analyze user behavior on our website and track interactions with review widgets. The Yotpo Pixel enables us to collect aggregated data to measure the effectiveness of product reviews and social proof elements. For more information, please see Yotpo’s Privacy Policy.

7. GrowthBook

We use the “GrowthBook” tool on our website, a service provided by GrowthBook, Inc., 1950 W Corporate Way #34560, Anaheim, CA 92801, to control and optimize features of our offerings. For more information, please see GrowthBook’s Privacy Policy.

iii. (Re-)Marketing Data Sharing with Third Parties

We use cookies and similar technologies to evaluate the reach and engagement of our advertising campaigns and how users who became aware of our website/app through our advertising campaigns use them. In addition, we use cookies and similar technologies to track which users visit our website/app in order to form groups (so-called “audiences”) and target these audiences with personalized advertising on other online platforms.

We also share this information with third parties, who may process it for their own purposes.

If you have consented to this, we track whether you reached us through one of our advertising campaigns and how you then interact with our website/app. For example, we can track whether you installed our app after seeing one of our ads online. In addition, this allows us to track what percentage of users who saw an ad actually use content from our website/app. This helps us better plan and manage our advertising budget.

We also group the users of our website/app into so-called audiences. Audiences are user groups that we compile based on specific criteria (e.g., all users who have viewed a category of recipes). If the users in an audience are also users of our marketing partners, we can target these users with ads there (remarketing). Our marketing partner can also use information it has about its users in one of our audiences to suggest similar user groups to us for advertising.

To this end, we inform our marketing partners that you have visited our website or are using our app, and whether you have visited pages defined by us or performed other actions (e.g., registered an account). Our marketing partners may also use this information for their own purposes, for example, to further personalize your profile on their online platform.

Our marketing partners are themselves responsible under data protection law for the data processing they carry out for their own purposes. The marketing partner also provides you with privacy information regarding this.

We use the following products for (re)marketing and data exchange with third parties, or collaborate with the following marketing partners:

1. Criteo

Criteo is a service provided by Criteo SA, Rue Blanche, 75009 Paris, France (“Criteo”). Please also refer to the Criteo Privacy Policy.

2. Microsoft Bing Ads

Microsoft Bing Ads is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Please also refer to the Microsoft Privacy Statement.

3. Meta Pixel

MetaPixel is a product of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (“Meta”). You can find more information about MetaPixel here. Please also refer to the Facebook Data Policy.

4. Google Ads/DoubleClick

Google Ads / DoubleClick is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). You can find more information on how Google uses personal data here.

5. Facebook App Ads

Facebook App Ads is a product of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”) . You can find more information about Facebook App Ads here. Please also refer to the Facebook Data Policy.

6. TikTok

TikTok is a service provided by TikTok Technology Limited, 10 Earlsfort Court, Dublin 2, D02 AK70, and TikTok Information Technologies UK Limited, One London Wall, 6th Floor, London, EC2Y 5EB (“TikTok”). Please also refer to the TikTok Privacy Policy.

7. Pinterest

Pinterest is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). Please also refer to the Pinterest Privacy Policy.

8. SignalSight

SignalSight is a service provided by ZZG Tech Ltd., 2 Frederick Street, London WC2X 0ND, London, United Kingdom (“SignalSight”). Please also refer to the SignalSight Privacy Policy.

9. Adverfly

Adverfly is a service provided by Adverfly Ltd., 56789 Marketing Lane, City, Country (“Adverfly”). Please also review the Adverfly Privacy Policy.

10. Spotify Ads

Spotify Ads is a product of Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden (“Spotify”). You can find more information about Spotify Ads here. Please also refer to the Spotify Privacy Policy.

11. Taboola

Taboola is a product of Taboola Europe Limited, Aldgate House, 33 Aldgate High Street, 2nd Floor, London EC3N 1DL, United Kingdom (“Taboola”). Please also refer to the Taboola Privacy Policy.

12. OpenAI Ads

OpenAI Ads is a service provided by OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”). Please also review the OpenAI Privacy Policy.

iv. (Re-)Marketing – Data Sharing with Third Parties Regarding Email Addresses or Phone Numbers

If you have provided us with your email address or phone number (e.g., by participating in a contest or subscribing to a newsletter) and have consented to this, we also use your email address or phone number to form groups (so-called “audiences”) and to target these audiences with personalized advertising on other online platforms.

To do this, we first create a “hashed” version of your email address or phone number. This means that we generate a digital representation of your email address or phone number. The original form of your email address or phone number cannot be deduced from this representation (the “hash”). For example, we create the hash 8fddd90f6267d4868a33d07f3d95d7271c7385555156739628eafbed789b862b from the email address hash@oetker.com. Your email address or phone number is pseudonymized through this process.

We share the hash of your email address or phone number with our marketing partners. If you are also registered with our marketing partner using the same email address or phone number, the respective marketing partner can identify you as a user of its platform (to do this, the marketing partner compares the hashes we provide with the hashes of its users’ email addresses or phone numbers generated using the same process). In this case, we group you into so-called audiences. Audiences are user groups that we compile based on specific criteria. We can then target you with ads on our marketing partner’s platform (remarketing). Our marketing partner may also use the information it has about its users in one of our audiences to suggest similar user groups to us for advertising purposes. Our marketing partners may also use this information for their own purposes, for example, to further personalize your profile on their online platform.

Unless you are registered with our marketing partner or have registered using a different email address or phone number, the respective marketing partner cannot identify you as a user.

In both cases—whether the match is successful or unsuccessful—the respective marketing partner discards the hashes we have transmitted.

The legal basis for this is your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time with future effect.

For (re)marketing—data exchange with third parties via email addresses or phone numbers—we use the following products or collaborate with the following marketing partners:

1. Facebook Custom Audience from a customer list

Facebook Custom Audience from a customer list is a product of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (“Facebook”). Please also refer to the Facebook Data Policy.

4. Withdrawal of Consent (Art. 7(3) GDPR)

If the processing is based on your consent (Art. 6(1)(a) GDPR), you have the right to withdraw your consent at any time with future effect. To do so, you may contact us using the contact details provided in the “Controller” section or use the options described in the context of the respective processing.

5. Right to Object (Art. 21 GDPR)

If the processing is based on our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to the processing at any time on grounds relating to your particular situation. This also applies to profiling based on these provisions.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

6. Other Data Subject Rights

You may exercise additional rights regarding personal data concerning you:

● Right of access (Art. 15 GDPR)

● Right to rectification (Art. 16 GDPR)

● Right to erasure (“right to be forgotten”) (Art. 17 GDPR)

● Right to restriction of processing (Art. 18 GDPR)

● Right to data portability (Art. 20 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

7. Automated decision-making/profiling

Automated decision-making or profiling does not take place.

8. Versioning

Last updated: April 2026